Static task
static1
Behavioral task
behavioral1
Sample
85ac45f578b0455c24184fd6b78cc76ba824991880987eb7200460d45823fe66.exe
Resource
win7-20220812-en
General
-
Target
85ac45f578b0455c24184fd6b78cc76ba824991880987eb7200460d45823fe66
-
Size
344KB
-
MD5
44c88fadbbdc763a971d2c7ce35811c0
-
SHA1
af1e40cbaa5b90897547c89ae9c49004b105733c
-
SHA256
85ac45f578b0455c24184fd6b78cc76ba824991880987eb7200460d45823fe66
-
SHA512
0ac3fe28d03c6f65532f44674c50c3bd9f7d38ac8eb05485c32cf0151066158b4db9e1412cc8bbaed5f02bb81c1a44e9bce8f8508d4e7f194b142c193aecb095
-
SSDEEP
6144:zYnrblOS1iK/1fBSmSe/7BYKuEUvTnGYrfHfKw0PsNhyoKCa:yb/fBSTe/7B5tUr7rX70PsN3Kj
Malware Config
Signatures
Files
-
85ac45f578b0455c24184fd6b78cc76ba824991880987eb7200460d45823fe66.exe windows x86
819d97c2aab333a59c4144ffe6666356
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
lstrcmpW
GlobalFlags
GlobalAddAtomW
WriteFile
FlushFileBuffers
GetCurrentProcess
GetVersionExA
LoadLibraryA
GlobalDeleteAtom
GlobalFindAtomW
GetCurrentThreadId
LocalFileTimeToFileTime
GetFileSizeEx
GetModuleHandleA
RtlUnwind
HeapFree
GetCommandLineA
GetStartupInfoA
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
ExitProcess
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapCreate
VirtualFree
VirtualAlloc
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetFilePointerEx
OutputDebugStringW
GetSystemTime
CreateMutexW
GetProcessHeap
OpenThread
AddAtomW
ReleaseMutex
FindAtomW
DeleteAtom
SystemTimeToFileTime
lstrlenA
lstrcmpA
GetAtomNameW
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
WideCharToMultiByte
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
lstrlenW
SetLastError
Sleep
GetLongPathNameW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
OpenProcess
GetLastError
GetVersionExW
InterlockedDecrement
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
DeleteCriticalSection
InitializeCriticalSection
FreeLibrary
GetModuleHandleW
GetModuleFileNameW
LoadLibraryW
GetCurrentProcessId
DeviceIoControl
FindResourceW
LoadResource
LockResource
SizeofResource
CreateFileW
CloseHandle
ReadFile
SetFilePointer
user32
DestroyMenu
GetForegroundWindow
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
GetClientRect
PostMessageW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
DefWindowProcW
CallWindowProcW
GetMenu
SystemParametersInfoA
IsIconic
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
SetWindowPos
SetWindowLongW
IsWindow
GetDlgItem
GetFocus
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameW
PtInRect
SetWindowTextW
SetWindowsHookExW
CallNextHookEx
DispatchMessageW
GetKeyState
PeekMessageW
ValidateRect
GetWindowTextW
wsprintfW
GrayStringW
LoadCursorW
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
UnhookWindowsHookEx
GetWindowThreadProcessId
SendMessageW
GetParent
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
DrawTextExW
DrawTextW
TabbedTextOutW
PostQuitMessage
RegisterWindowMessageW
LoadIconW
WinHelpW
GetCapture
GetClassLongW
GetPropW
SetPropW
CopyRect
RemovePropW
GetSubMenu
GetMenuItemCount
GetMenuItemID
EnableWindow
MessageBoxW
GetMenuState
advapi32
RegEnumKeyExW
RegQueryValueExA
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
ole32
CoInitializeSecurity
CoInitialize
CoCreateInstance
CoUninitialize
oleaut32
VariantChangeType
SysAllocStringLen
SysStringByteLen
SysAllocStringByteLen
VariantClear
SysFreeString
SysAllocString
VariantInit
shlwapi
SHGetValueW
PathAppendW
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
psapi
GetModuleFileNameExW
oleacc
LresultFromObject
CreateStdAccessibleObject
gdi32
DeleteDC
DeleteObject
CreateBitmap
GetClipBox
SetTextColor
SaveDC
RestoreDC
SetMapMode
SetBkColor
GetStockObject
ScaleViewportExtEx
ScaleWindowExtEx
SetWindowExtEx
GetDeviceCaps
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
Sections
.text Size: 169KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 114KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE